Palo Alto Networks PCCSE Exam - Topic 1 Question 13 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 13
Topic #: 1

The development team wants to block Cross Site Scripting attacks from pods its environment

How should the team construct the CNAF policy to protect against this attack?

Acreate a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection and set the action to alert

Bcreate a Host CNAF policy targeted at a specific resource, check the box for XSS attack protection and set the action to 'prevent'

Ccreate a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection and set the action to prevent

Dcreate a Container CNAF policy, targeted at a specific resource, and they should set 'Explicitly allowed inbound IP sources' to the IP address of the pod.

Show Suggested Answer

Suggested Answer: B

by Shalon at May 04, 2022, 02:52 PM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leonor

4 months ago

Isn't it surprising that some still don't prioritize XSS protection?

upvoted 0 times

...

Vicente

4 months ago

Option B seems off, host policies are usually broader, not specific.

upvoted 0 times

...

Nan

4 months ago

Wait, why would you set it to alert instead of prevent? Seems risky.

upvoted 0 times

...

Norah

4 months ago

Totally agree, prevention is key!

upvoted 0 times

...

Eric

4 months ago

I think option C is the best choice for preventing XSS.

upvoted 0 times

...

Dyan

5 months ago

I don't think option D is relevant for XSS attacks; it seems more about network access control rather than directly blocking the attack itself.

upvoted 0 times

...

Paz

5 months ago

I think we practiced a similar question where we had to set actions for different types of attacks. I feel like 'prevent' is the right choice here.

upvoted 0 times

...

Kris

5 months ago

I remember we discussed the difference between Container and Host CNAF policies, but I'm not sure which one is better for XSS protection.

upvoted 0 times

...

Carol

5 months ago

I’m a bit confused about whether to set the action to 'alert' or 'prevent'. I feel like 'prevent' is more effective, but I can't recall the exact details.

upvoted 0 times

...